We use AD too and synchronise the users with the AD on a daily basis. When a user gets added to the server they need to be given a site role. Depending on how you 'import' your usrs will depend how you set the site role. If one isn't set then they will possibly appear as Unlicensed.